Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
This class will obfuscate forms and massively cuts spam... http://codingrecipes.com/a-php-form-o…
Fetching latest commit…
Cannot retrieve the latest commit at this time.
|Failed to load latest commit information.|
This is a class I developed a while back while working on a project of mine and we already know that itÕs very effective. In order to understand what it does you need to first understand how a browser sends a POST request. When a user submits a form, browser sends something like this to the server: POST /somepage.php HTTP/1.1 Host: example.com Content-Type: application/x-www-form-urlencoded Content-Length: THE LENGTH username=blah&password=blah&email=some_email There are 2 problems with this: 1 Ð Someone along the way can view the password and email address by looking at the packets that are going to the server. (take a look at Wireshark software) 2 Ð You can send automatic queries to servers, for example automated spam through contact forms works like this. (some spam software can also read Captcha images so you need more protection) The class I developed will change this POST request to something like this: POST /somepage.php HTTP/1.1 Host: example.com Content-Type: application/x-www-form-urlencoded Content-Length: THE LENGTH JDF8W9JHF=blah&OEROWF83=blah&VLKDSFOE=some_email Note that the field names are changed to random strings, and they also change every time the form is shown, so: 1 Ð Even if a user in the middle can see the packets, he/she wonÕt know that OEROWF83 stands for ÒpasswordÓ. 2 Ð A spam software wonÕt have a way of guessing the field names because they are random every time. There is also a secret encryption key which you only know what it is.